Skip to content

Commit eb74560

Browse files
committed
Add a note about Rails LTS versions (see PR #847).
1 parent c0464fb commit eb74560

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

README.md

+11
Original file line numberDiff line numberDiff line change
@@ -206,6 +206,17 @@ GH_API_TOKEN="your GitHub API Token" bundle exec rake sync_github_advisories[gem
206206
* Delete the GitHub data at the bottom of the YAML file.
207207
* Double check all the data, commit it, and make a PR.
208208

209+
## Rails LTS
210+
211+
The maintainers of [Rails LTS] have [asked us not to track the Rails LTS versions][PR-847].
212+
If you are using [Rails LTS] and [bundler-audit], it is advised that you should
213+
add the [List of CVEs addressed by Rails LTS] to your `.bundler-audit.yml` file
214+
under `ignore:`.
215+
216+
[Rails LTS]: https://railslts.com/
217+
[List of CVEs addressed by Rails LTS]: https://makandracards.com/railslts/474590-list-cves-addressed-rails-lts
218+
[PR-847]: https://github.com/rubysec/ruby-advisory-db/pull/847
219+
209220
## Credits
210221

211222
Please see [CONTRIBUTORS.md].

0 commit comments

Comments
 (0)